recalculate group membership for all members of a deleted role

uffd/role/views.py

@@ -72,6 +72,12 @@ def update(roleid=False):
 def delete(roleid):
 	session = db.session
 	role = Role.query.filter_by(id=roleid).one()
+	members = role.member_ldap()
 	session.delete(role)
 	session.commit()
+	for user in members:
+		recalculate_user_groups(user)
+		if not user.to_ldap():
+			flash('updating group membership for user {} failed'.format(user.loginname))
+	session.commit()
 	return redirect(url_for('role.index'))

uffd/user/views_user.py

@@ -111,8 +111,7 @@ def delete(uid):
 	user = User.from_ldap(conn.entries[0])
 
 	session = db.session
-	roles = Role.query.all()
-	for role in roles:
+	for role in Role.get_for_user(user).all():
 		if user.dn in role.member_dns():
 			role.del_member(user)